IoT Authentication Key Generation Without Shared Key Transmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional authentication mechanisms for Internet of Things (IoT) devices with constrained resources are vulnerable to network attacks due to limited storage and computing power, making them susceptible to unauthorized access and network security breaches.
Innovation Solution
A data transmission method that generates authentication keys based on security credentials distributed by an authentication center, enabling secure authentication without the need for key transmission between devices, utilizing elliptic curve cryptography to reduce bandwidth and storage requirements.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If symmetric key encryption is used, then authentication can be performed, but the shared key is easy to obtain and manage, resulting in network attacks
Solution Approach 1:
The patent introduces an authentication center as an intermediary to distribute security credentials to IoT devices. This mediator enables devices to generate authentication keys without direct key sharing, thereby preventing the harmful effect of easy key obtaining while maintaining authentication capability.
Solution Approach 2:
The patent replaces traditional symmetric key encryption with a credential-based authentication mechanism. Instead of relying on shared mechanical keys that are vulnerable to attacks, the system uses cryptographic credentials distributed by an authentication center to generate session keys, thereby eliminating the vulnerability to key theft.
2Reliability
If asymmetric key encryption is used, then security is improved, but certificates and public keys occupy large network bandwidth and storage resources
Solution Approach 1:
The patent extracts only the essential authentication functionality from full asymmetric encryption. Instead of transmitting complete certificates and public keys, the system extracts and transmits only the necessary security credentials from the authentication center, significantly reducing bandwidth and storage requirements while maintaining security.
Solution Approach 2:
The patent uses short-lived session keys generated from credentials instead of permanent certificates and public keys. These disposable session keys are much smaller in size and consume minimal resources, eliminating the need for large asymmetric key infrastructure while providing sufficient authentication security.
3Reliability
If conventional authentication mechanisms are used on IoT devices, then authentication can be performed, but the devices have limited storage and computing power resources
Solution Approach 1:
The patent enables IoT devices to perform self-authentication by generating their own session keys from credentials provided by the authentication center. This self-service mechanism eliminates the need for complex asymmetric encryption operations on the devices, reducing computational burden while maintaining authentication capability.
Solution Approach 2:
The patent changes the authentication parameters from large asymmetric keys to smaller session keys derived from credentials. This parameter transformation reduces the computational and storage requirements on IoT devices while maintaining sufficient security strength for authentication.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
This application discloses a data transmission method and apparatus, a computer device, and a communication system, relating to the communication field. The method includes: generating an authentication key based on a security credential distributed by an authentication center, and after mutual authentication between devices is performed based on authentication code generated based on the authentication key, transmitting encrypted data obtained by encrypting with an encryption key. In this way, authentication is performed based on the generated authentication key, and transmission of the authentication key does not need to be performed between the devices, preventing the authentication key from being intercepted and improving security of the authentication key while reducing network attacks. The authentication center does not need to manage the authentication key or the security credential, thus decentralizing an authentication mechanism and simplifying key management. In addition, the authentication key is small in data size, meeting storage requirements of an internet of things device with limited resources. Therefore, security authentication on the internet of things device is implemented, network attacks on internet of things are reduced, and network security of internet of things is improved.